CVE-2026-0834

published 2026-01-21

CVE-2026-0834: Logic vulnerability in TP-Link Archer C20 v5, 6.0, Archer AX53 v1.0 and TL-WR841N v13 (TDDP module) allows unauthenticated adjacent attackers to execute…

Priority P3 56 high 8.8 CVSS 3.1

AV A AC L PR N UI N S U C H I H A H

Logic vulnerability in TP-Link Archer C20 v5, 6.0, Archer AX53 v1.0 and TL-WR841N v13 (TDDP module) allows unauthenticated adjacent attackers to execute administrative commands including factory reset and device reboot without credentials. Attackers on the adjacent network can remotely trigger factory resets and reboots without credentials, causing configuration loss and interruption of device availability.

This issue affects Archer C20 v6.0 < V6_251031, Archer C20 v5 <EU_V5_260317 or < US_V5_260419

Archer AX53 v1.0 <

V1_251215

TL-WR841N v13 < 0.9.1 Build 20231120 Rel.62366

Affected

5 ranges

Vendor	Product	Version range	Fixed in
tp-link	archer_ax53_firmware	—	—
tp-link	archer_c20_firmware	—	—
tp-link_systems_inc	archer_c20_v5	< US_V5_260419	US_V5_260419
tp-link_systems_inc	archer_c20_v5	< EU_V5_260317	EU_V5_260317
tp_link_systems_inc	tl-wr841n_v13	< 0.9.1 Build 20231120 Rel.62366	0.9.1 Build 20231120 Rel.62366

CVSS provenance

nvd v3.1 8.8 HIGH CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v4.0 7.2 HIGH CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-290